Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 9.1.0
Report Generated On: Sun, 12 May 2024 21:34:15 GMT
Dependencies Scanned: 22 (17 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2024-05-12T21:30:54Z
NVD API Last Modified: 2024-05-10T18:15:07Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
accessors-smart-2.5.1.jar		pkg:maven/net.minidev/accessors-smart@2.5.1		41
angus-activation-2.0.2.jar		pkg:maven/org.eclipse.angus/angus-activation@2.0.2		35
asm-9.7.jar		pkg:maven/org.ow2.asm/asm@9.7		54
error_prone_annotations-2.27.1.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.27.1		29
j2objc-annotations-3.0.0.jar		pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0		33
jakarta.activation-api-2.1.3.jar		pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3		45
json-path-2.9.0.jar	cpe:2.3:a:json-path:jayway_jsonpath:2.9.0:::::::*	pkg:maven/com.jayway.jsonpath/json-path@2.9.0	Highest	34
json-smart-2.5.1.jar	cpe:2.3:a:json-smart_project:json-smart:2.5.1:::::::* cpe:2.3:a:json-smart_project:json-smart-v2:2.5.1:::::::*	pkg:maven/net.minidev/json-smart@2.5.1	Highest	51
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		17
micrometer-commons-1.12.5.jar		pkg:maven/io.micrometer/micrometer-commons@1.12.5		65
micrometer-observation-1.12.5.jar		pkg:maven/io.micrometer/micrometer-observation@1.12.5		65
slf4j-api-2.0.13.jar		pkg:maven/org.slf4j/slf4j-api@2.0.13		29
spotbugs-annotations-4.8.5.jar		pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.5		53
spring-core-6.1.6.jar	cpe:2.3:a:pivotal_software:spring_framework:6.1.6:::::::* cpe:2.3:a:springsource:spring_framework:6.1.6:::::::* cpe:2.3:a:vmware:spring_framework:6.1.6:::::::*	pkg:maven/org.springframework/spring-core@6.1.6	Highest	41
spring-hateoas-2.2.2.jar	cpe:2.3:a:vmware:spring_hateoas:2.2.2:::::::*	pkg:maven/org.springframework.hateoas/spring-hateoas@2.2.2	Highest	46
spring-plugin-core-3.0.0.jar		pkg:maven/org.springframework.plugin/spring-plugin-core@3.0.0		42
spring-web-6.1.6.jar	cpe:2.3:a:pivotal_software:spring_framework:6.1.6:::::::* cpe:2.3:a:springsource:spring_framework:6.1.6:::::::* cpe:2.3:a:vmware:spring_framework:6.1.6:::::::* cpe:2.3:a:web_project:web:6.1.6:::::::*	pkg:maven/org.springframework/spring-web@6.1.6	Highest	35

Dependencies (vulnerable)

accessors-smart-2.5.1.jar

Description:

Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/minidev/accessors-smart/2.5.1/accessors-smart-2.5.1.jar
MD5: 51e60dbf9ac51f6666f0077317990944
SHA1: 19b820261eb2e7de7d5bde11d1c06e4501dd7e5f
SHA256:2796ae857d0c7be4bc3580daa4d3828d555212355f4c83d38dd0af0742b3c812
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/net.minidev/json-smart@2.5.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	accessors-smart	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	minidev	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	bundle-docurl	https://urielch.github.io/	Low
Vendor	Manifest	bundle-symbolicname	net.minidev.accessors-smart	Medium
Vendor	pom	artifactid	accessors-smart	Highest
Vendor	pom	artifactid	accessors-smart	Low
Vendor	pom	developer email	shoothzj@gmail.com	Low
Vendor	pom	developer email	uchemouni@gmail.com	Low
Vendor	pom	developer id	shoothzj	Medium
Vendor	pom	developer id	uriel	Medium
Vendor	pom	developer name	Uriel Chemouni	Medium
Vendor	pom	developer name	ZhangJian He	Medium
Vendor	pom	groupid	net.minidev	Highest
Vendor	pom	name	ASM based accessors helper used by json-smart	High
Vendor	pom	organization name	Chemouni Uriel	High
Vendor	pom	organization url	https://urielch.github.io/	Medium
Vendor	pom	url	https://urielch.github.io/	Highest
Product	file	name	accessors-smart	High
Product	jar	package name	asm	Highest
Product	jar	package name	minidev	Highest
Product	jar	package name	net	Highest
Product	Manifest	bundle-docurl	https://urielch.github.io/	Low
Product	Manifest	Bundle-Name	accessors-smart	Medium
Product	Manifest	bundle-symbolicname	net.minidev.accessors-smart	Medium
Product	pom	artifactid	accessors-smart	Highest
Product	pom	developer email	shoothzj@gmail.com	Low
Product	pom	developer email	uchemouni@gmail.com	Low
Product	pom	developer id	shoothzj	Low
Product	pom	developer id	uriel	Low
Product	pom	developer name	Uriel Chemouni	Low
Product	pom	developer name	ZhangJian He	Low
Product	pom	groupid	net.minidev	Highest
Product	pom	name	ASM based accessors helper used by json-smart	High
Product	pom	organization name	Chemouni Uriel	Low
Product	pom	organization url	https://urielch.github.io/	Low
Product	pom	url	https://urielch.github.io/	Medium
Version	file	version	2.5.1	High
Version	Manifest	Bundle-Version	2.5.1	High
Version	pom	version	2.5.1	Highest

Identifiers

pkg:maven/net.minidev/accessors-smart@2.5.1 (Confidence:High)

angus-activation-2.0.2.jar

Description:

 Implementation

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-activation/2.0.2/angus-activation-2.0.2.jar
MD5: 42bba74155dc773eca277ee7a16f74be
SHA1: 41f1e0ddd157c856926ed149ab837d110955a9fc
SHA256:6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.0.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	angus-activation	High
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	angus	Highest
Vendor	jar	package name	eclipse	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	angus-activation	Medium
Vendor	Manifest	extension-name	org.eclipse.angus	Medium
Vendor	Manifest	implementation-build-id	2.0.2-RELEASE-c08e320	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	provide-capability	osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MailcapRegistryProvider",osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MimeTypeRegistryProvider"	Low
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	angus-activation	Highest
Vendor	pom	artifactid	angus-activation	Low
Vendor	pom	groupid	org.eclipse.angus	Highest
Vendor	pom	name	Angus Activation Registries	High
Vendor	pom	parent-artifactid	angus-activation-project	Low
Product	file	name	angus-activation	High
Product	jar	package name	activation	Highest
Product	jar	package name	angus	Highest
Product	jar	package name	eclipse	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Angus Activation Registries	Medium
Product	Manifest	bundle-symbolicname	angus-activation	Medium
Product	Manifest	extension-name	org.eclipse.angus	Medium
Product	Manifest	implementation-build-id	2.0.2-RELEASE-c08e320	Low
Product	Manifest	Implementation-Title	Angus Activation Registries	High
Product	Manifest	provide-capability	osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MailcapRegistryProvider",osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MimeTypeRegistryProvider"	Low
Product	Manifest	specification-title	Jakarta Activation Specification	Medium
Product	pom	artifactid	angus-activation	Highest
Product	pom	groupid	org.eclipse.angus	Highest
Product	pom	name	Angus Activation Registries	High
Product	pom	parent-artifactid	angus-activation-project	Medium
Version	file	version	2.0.2	High
Version	Manifest	Bundle-Version	2.0.2	High
Version	pom	version	2.0.2	Highest

Identifiers

pkg:maven/org.eclipse.angus/angus-activation@2.0.2 (Confidence:High)

asm-9.7.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html

File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.7/asm-9.7.jar
MD5: 3957b18bf02a62edcb6726d074b90b08
SHA1: 073d7b3086e14beb604ced229c302feff6449723
SHA256:adf46d5e34940bdf148ecdd26a9ee8eea94496a72034ff7141066b3eea5c4e9d
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.hazendaz/javabean-tester@2.8.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	asm	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	objectweb	Highest
Vendor	Manifest	bundle-docurl	http://asm.ow2.org	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Vendor	pom	artifactid	asm	Highest
Vendor	pom	artifactid	asm	Low
Vendor	pom	developer email	ebruneton@free.fr	Low
Vendor	pom	developer email	eu@javatx.org	Low
Vendor	pom	developer email	forax@univ-mlv.fr	Low
Vendor	pom	developer id	ebruneton	Medium
Vendor	pom	developer id	eu	Medium
Vendor	pom	developer id	forax	Medium
Vendor	pom	developer name	Eric Bruneton	Medium
Vendor	pom	developer name	Eugene Kuleshov	Medium
Vendor	pom	developer name	Remi Forax	Medium
Vendor	pom	groupid	org.ow2.asm	Highest
Vendor	pom	name	asm	High
Vendor	pom	organization name	OW2	High
Vendor	pom	organization url	http://www.ow2.org/	Medium
Vendor	pom	parent-artifactid	ow2	Low
Vendor	pom	parent-groupid	org.ow2	Medium
Vendor	pom	url	http://asm.ow2.io/	Highest
Product	file	name	asm	High
Product	jar	package name	asm	Highest
Product	jar	package name	objectweb	Highest
Product	Manifest	bundle-docurl	http://asm.ow2.org	Low
Product	Manifest	Bundle-Name	org.objectweb.asm	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Product	Manifest	Implementation-Title	ASM, a very small and fast Java bytecode manipulation framework	High
Product	pom	artifactid	asm	Highest
Product	pom	developer email	ebruneton@free.fr	Low
Product	pom	developer email	eu@javatx.org	Low
Product	pom	developer email	forax@univ-mlv.fr	Low
Product	pom	developer id	ebruneton	Low
Product	pom	developer id	eu	Low
Product	pom	developer id	forax	Low
Product	pom	developer name	Eric Bruneton	Low
Product	pom	developer name	Eugene Kuleshov	Low
Product	pom	developer name	Remi Forax	Low
Product	pom	groupid	org.ow2.asm	Highest
Product	pom	name	asm	High
Product	pom	organization name	OW2	Low
Product	pom	organization url	http://www.ow2.org/	Low
Product	pom	parent-artifactid	ow2	Medium
Product	pom	parent-groupid	org.ow2	Medium
Product	pom	url	http://asm.ow2.io/	Medium
Version	file	version	9.7	High
Version	Manifest	Bundle-Version	9.7	High
Version	Manifest	Implementation-Version	9.7	High
Version	pom	parent-version	9.7	Low
Version	pom	version	9.7	Highest

Identifiers

pkg:maven/org.ow2.asm/asm@9.7 (Confidence:High)

error_prone_annotations-2.27.1.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.27.1/error_prone_annotations-2.27.1.jar
MD5: abe81ff506aaec1e2ead937983c7ac78
SHA1: a87dac4f79a6e5b1e55c629f16c754c53cbd50ec
SHA256:a4895b5db0243614d90ce2a2c6f830624909c01e31587d8ec3ecf51e5e7e7506
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.psi-probe/psi-probe-rest@5.0.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Vendor	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	error_prone_annotations	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Product	Manifest	Bundle-Name	error-prone annotations	Medium
Product	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	groupid	com.google.errorprone	Highest
Product	pom	name	error-prone annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Version	file	version	2.27.1	High
Version	Manifest	Bundle-Version	2.27.1	High
Version	pom	version	2.27.1	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.27.1 (Confidence:High)

j2objc-annotations-3.0.0.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar
MD5: f59529b29202a5baf37f491ea5ec8627
SHA1: 7399e65dd7e9ff3404f4535b2f017093bdb134c7
SHA256:88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.psi-probe/psi-probe-rest@5.0.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2objc-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	j2objc	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	j2objc-annotations	Highest
Vendor	pom	artifactid	j2objc-annotations	Low
Vendor	pom	developer email	tball@google.com	Low
Vendor	pom	developer id	tomball	Medium
Vendor	pom	developer name	Tom Ball	Medium
Vendor	pom	developer org	Google	Medium
Vendor	pom	developer org URL	https://www.google.com	Medium
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	pom	url	google/j2objc/	Highest
Product	file	name	j2objc-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	google	Highest
Product	jar	package name	j2objc	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	j2objc-annotations	Highest
Product	pom	developer email	tball@google.com	Low
Product	pom	developer id	tomball	Low
Product	pom	developer name	Tom Ball	Low
Product	pom	developer org	Google	Low
Product	pom	developer org URL	https://www.google.com	Low
Product	pom	groupid	com.google.j2objc	Highest
Product	pom	name	J2ObjC Annotations	High
Product	pom	url	google/j2objc/	High
Version	file	version	3.0.0	High
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0 (Confidence:High)

jakarta.activation-api-2.1.3.jar

Description:

  Specification

License:

EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
MD5: 76e7b680375ea9f40f3ddbd702efcd25
SHA1: fa165bd70cda600368eee31555222776a46b881f
SHA256:01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.0.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.activation-api	High
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	jakarta	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Vendor	Manifest	extension-name	jakarta.activation	Medium
Vendor	Manifest	implementation-build-id	7f7d358	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.activation-api	Highest
Vendor	pom	artifactid	jakarta.activation-api	Low
Vendor	pom	developer email	bill.shannon@oracle.com	Low
Vendor	pom	developer id	shannon	Medium
Vendor	pom	developer name	Bill Shannon	Medium
Vendor	pom	developer org	Oracle	Medium
Vendor	pom	groupid	jakarta.activation	Highest
Vendor	pom	name	Jakarta Activation API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	jakartaee/jaf-api	Highest
Vendor	pom (hint)	developer org	sun	Medium
Product	file	name	jakarta.activation-api	High
Product	jar	package name	activation	Highest
Product	jar	package name	jakarta	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Activation API	Medium
Product	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Product	Manifest	extension-name	jakarta.activation	Medium
Product	Manifest	implementation-build-id	7f7d358	Low
Product	Manifest	Implementation-Title	Jakarta Activation API	High
Product	Manifest	specification-title	Jakarta Activation Specification	Medium
Product	pom	artifactid	jakarta.activation-api	Highest
Product	pom	developer email	bill.shannon@oracle.com	Low
Product	pom	developer id	shannon	Low
Product	pom	developer name	Bill Shannon	Low
Product	pom	developer org	Oracle	Low
Product	pom	groupid	jakarta.activation	Highest
Product	pom	name	Jakarta Activation API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	jakartaee/jaf-api	High
Version	file	version	2.1.3	High
Version	Manifest	Bundle-Version	2.1.3	High
Version	pom	parent-version	2.1.3	Low
Version	pom	version	2.1.3	Highest

Identifiers

pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3 (Confidence:High)

json-path-2.9.0.jar

Description:

A library to query and verify JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/jayway/jsonpath/json-path/2.9.0/json-path-2.9.0.jar
MD5: e89678d2e4ff45e4f39a97ccd0223719
SHA1: 37fe2217f577b0b68b18e62c4d17a8858ecf9b69
SHA256:11a9ee6f88bb31f1450108d1cf6441377dec84aca075eb6bb2343be157575bea
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.0.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	json-path	High
Vendor	jar	package name	jayway	Highest
Vendor	jar	package name	json	Highest
Vendor	jar	package name	jsonpath	Highest
Vendor	jar	package name	path	Highest
Vendor	Manifest	automatic-module-name	json.path	Medium
Vendor	Manifest	bundle-symbolicname	json-path	Medium
Vendor	pom	artifactid	json-path	Highest
Vendor	pom	artifactid	json-path	Low
Vendor	pom	developer email	kalle.stenflo (a) gmail.com	Low
Vendor	pom	developer id	kalle.stenflo	Medium
Vendor	pom	developer name	Kalle Stenflo	Medium
Vendor	pom	groupid	com.jayway.jsonpath	Highest
Vendor	pom	name	json-path	High
Vendor	pom	url	jayway/JsonPath	Highest
Product	file	name	json-path	High
Product	jar	package name	jayway	Highest
Product	jar	package name	json	Highest
Product	jar	package name	jsonpath	Highest
Product	jar	package name	path	Highest
Product	Manifest	automatic-module-name	json.path	Medium
Product	Manifest	Bundle-Name	json-path	Medium
Product	Manifest	bundle-symbolicname	json-path	Medium
Product	Manifest	Implementation-Title	json-path	High
Product	pom	artifactid	json-path	Highest
Product	pom	developer email	kalle.stenflo (a) gmail.com	Low
Product	pom	developer id	kalle.stenflo	Low
Product	pom	developer name	Kalle Stenflo	Low
Product	pom	groupid	com.jayway.jsonpath	Highest
Product	pom	name	json-path	High
Product	pom	url	jayway/JsonPath	High
Version	file	version	2.9.0	High
Version	Manifest	Bundle-Version	2.9.0	High
Version	pom	version	2.9.0	Highest

Identifiers

pkg:maven/com.jayway.jsonpath/json-path@2.9.0 (Confidence:High)
cpe:2.3:a:json-path:jayway_jsonpath:2.9.0:*:*:*:*:*:*:* (Confidence:Highest)

json-smart-2.5.1.jar

Description:

JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/minidev/json-smart/2.5.1/json-smart-2.5.1.jar
MD5: 88a65001b616c2e7796f9263ad97bbf1
SHA1: 4c11d2808d009132dfbbf947ebf37de6bf266c8e
SHA256:86c0c189581b79b57b0719f443a724e9f628ffbb9eef645cf79194f5973a1001
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.0.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	json-smart	High
Vendor	jar	package name	json	Highest
Vendor	jar	package name	minidev	Highest
Vendor	jar	package name	net	Highest
Vendor	jar	package name	parser	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://urielch.github.io/	Low
Vendor	Manifest	bundle-symbolicname	net.minidev.json-smart	Medium
Vendor	pom	artifactid	json-smart	Highest
Vendor	pom	artifactid	json-smart	Low
Vendor	pom	developer email	adoneitan@gmail.com	Low
Vendor	pom	developer email	shoothzj@gmail.com	Low
Vendor	pom	developer email	uchemouni@gmail.com	Low
Vendor	pom	developer id	erav	Medium
Vendor	pom	developer id	shoothzj	Medium
Vendor	pom	developer id	uriel	Medium
Vendor	pom	developer name	Eitan Raviv	Medium
Vendor	pom	developer name	Uriel Chemouni	Medium
Vendor	pom	developer name	ZhangJian He	Medium
Vendor	pom	groupid	net.minidev	Highest
Vendor	pom	name	JSON Small and Fast Parser	High
Vendor	pom	organization name	Chemouni Uriel	High
Vendor	pom	organization url	https://urielch.github.io/	Medium
Vendor	pom	url	https://urielch.github.io/	Highest
Product	file	name	json-smart	High
Product	jar	package name	json	Highest
Product	jar	package name	minidev	Highest
Product	jar	package name	net	Highest
Product	jar	package name	parser	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://urielch.github.io/	Low
Product	Manifest	Bundle-Name	json-smart	Medium
Product	Manifest	bundle-symbolicname	net.minidev.json-smart	Medium
Product	pom	artifactid	json-smart	Highest
Product	pom	developer email	adoneitan@gmail.com	Low
Product	pom	developer email	shoothzj@gmail.com	Low
Product	pom	developer email	uchemouni@gmail.com	Low
Product	pom	developer id	erav	Low
Product	pom	developer id	shoothzj	Low
Product	pom	developer id	uriel	Low
Product	pom	developer name	Eitan Raviv	Low
Product	pom	developer name	Uriel Chemouni	Low
Product	pom	developer name	ZhangJian He	Low
Product	pom	groupid	net.minidev	Highest
Product	pom	name	JSON Small and Fast Parser	High
Product	pom	organization name	Chemouni Uriel	Low
Product	pom	organization url	https://urielch.github.io/	Low
Product	pom	url	https://urielch.github.io/	Medium
Version	file	version	2.5.1	High
Version	Manifest	Bundle-Version	2.5.1	High
Version	pom	version	2.5.1	Highest

Identifiers

pkg:maven/net.minidev/json-smart@2.5.1 (Confidence:High)
cpe:2.3:a:json-smart_project:json-smart:2.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:json-smart_project:json-smart-v2:2.5.1:*:*:*:*:*:*:* (Confidence:Low)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

micrometer-commons-1.12.5.jar

Description:

Module containing common code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.12.5/micrometer-commons-1.12.5.jar
MD5: 779a77354228141fd89fb7657d80f50a
SHA1: da45afd81a6a05267df5ddfe10438ea857e0f7d9
SHA256:d5510ea0442638cf09a6b00363ebd73d85e1a408bb3515eb942001d58334dbcb
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	micrometer-commons	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	micrometer	Highest
Vendor	Manifest	automatic-module-name	micrometer.commons	Medium
Vendor	Manifest	branch	HEAD	Low
Vendor	Manifest	build-date	2024-04-08_13:59:01	Low
Vendor	Manifest	build-date-utc	2024-04-08T13:59:01.393716590Z	Low
Vendor	Manifest	build-host	ed5fdb4eabcb	Low
Vendor	Manifest	build-job	deploy	Low
Vendor	Manifest	build-number	32110	Low
Vendor	Manifest	build-timezone	Etc/UTC	Low
Vendor	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/32110	Low
Vendor	Manifest	built-os	Linux	Low
Vendor	Manifest	built-status	release	Low
Vendor	Manifest	bundle-symbolicname	micrometer-commons	Medium
Vendor	Manifest	change	52d1d12	Low
Vendor	Manifest	full-change	52d1d1249324b691c355a70c53ae1921967449d3	Low
Vendor	Manifest	module-email	tludwig@vmware.com	Low
Vendor	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Vendor	Manifest	module-owner	tludwig@vmware.com	Low
Vendor	Manifest	module-source	/micrometer-commons	Low
Vendor	pom	artifactid	micrometer-commons	Highest
Vendor	pom	artifactid	micrometer-commons	Low
Vendor	pom	developer email	tludwig@vmware.com	Low
Vendor	pom	developer id	shakuzen	Medium
Vendor	pom	developer name	Tommy Ludwig	Medium
Vendor	pom	groupid	io.micrometer	Highest
Vendor	pom	name	micrometer-commons	High
Vendor	pom	url	micrometer-metrics/micrometer	Highest
Product	file	name	micrometer-commons	High
Product	jar	package name	common	Highest
Product	jar	package name	io	Highest
Product	jar	package name	micrometer	Highest
Product	Manifest	automatic-module-name	micrometer.commons	Medium
Product	Manifest	branch	HEAD	Low
Product	Manifest	build-date	2024-04-08_13:59:01	Low
Product	Manifest	build-date-utc	2024-04-08T13:59:01.393716590Z	Low
Product	Manifest	build-host	ed5fdb4eabcb	Low
Product	Manifest	build-job	deploy	Low
Product	Manifest	build-number	32110	Low
Product	Manifest	build-timezone	Etc/UTC	Low
Product	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/32110	Low
Product	Manifest	built-os	Linux	Low
Product	Manifest	built-status	release	Low
Product	Manifest	Bundle-Name	micrometer-commons	Medium
Product	Manifest	bundle-symbolicname	micrometer-commons	Medium
Product	Manifest	change	52d1d12	Low
Product	Manifest	full-change	52d1d1249324b691c355a70c53ae1921967449d3	Low
Product	Manifest	Implementation-Title	io.micrometer#micrometer-commons;1.12.5	High
Product	Manifest	module-email	tludwig@vmware.com	Low
Product	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Product	Manifest	module-owner	tludwig@vmware.com	Low
Product	Manifest	module-source	/micrometer-commons	Low
Product	pom	artifactid	micrometer-commons	Highest
Product	pom	developer email	tludwig@vmware.com	Low
Product	pom	developer id	shakuzen	Low
Product	pom	developer name	Tommy Ludwig	Low
Product	pom	groupid	io.micrometer	Highest
Product	pom	name	micrometer-commons	High
Product	pom	url	micrometer-metrics/micrometer	High
Version	file	version	1.12.5	High
Version	Manifest	Bundle-Version	1.12.5	High
Version	Manifest	Implementation-Version	1.12.5	High
Version	pom	version	1.12.5	Highest

Identifiers

pkg:maven/io.micrometer/micrometer-commons@1.12.5 (Confidence:High)

micrometer-observation-1.12.5.jar

Description:

Module containing Observation related code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.12.5/micrometer-observation-1.12.5.jar
MD5: 9f3c9878476067345afd87b74458f6e4
SHA1: ee23704259a1aad5c8f503db4d37cdfe5352e766
SHA256:888a8dcd3d631257e0c41952f1f5e79f0e77b604c7bee036c098a00eb0d5fab6
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	micrometer-observation	High
Vendor	jar	package name	io	Highest
Vendor	jar	package name	micrometer	Highest
Vendor	jar	package name	observation	Highest
Vendor	Manifest	automatic-module-name	micrometer.observation	Medium
Vendor	Manifest	branch	HEAD	Low
Vendor	Manifest	build-date	2024-04-08_13:59:01	Low
Vendor	Manifest	build-date-utc	2024-04-08T13:59:01.622808235Z	Low
Vendor	Manifest	build-host	ed5fdb4eabcb	Low
Vendor	Manifest	build-job	deploy	Low
Vendor	Manifest	build-number	32110	Low
Vendor	Manifest	build-timezone	Etc/UTC	Low
Vendor	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/32110	Low
Vendor	Manifest	built-os	Linux	Low
Vendor	Manifest	built-status	release	Low
Vendor	Manifest	bundle-symbolicname	micrometer-observation	Medium
Vendor	Manifest	change	52d1d12	Low
Vendor	Manifest	full-change	52d1d1249324b691c355a70c53ae1921967449d3	Low
Vendor	Manifest	module-email	tludwig@vmware.com	Low
Vendor	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Vendor	Manifest	module-owner	tludwig@vmware.com	Low
Vendor	Manifest	module-source	/micrometer-observation	Low
Vendor	pom	artifactid	micrometer-observation	Highest
Vendor	pom	artifactid	micrometer-observation	Low
Vendor	pom	developer email	tludwig@vmware.com	Low
Vendor	pom	developer id	shakuzen	Medium
Vendor	pom	developer name	Tommy Ludwig	Medium
Vendor	pom	groupid	io.micrometer	Highest
Vendor	pom	name	micrometer-observation	High
Vendor	pom	url	micrometer-metrics/micrometer	Highest
Product	file	name	micrometer-observation	High
Product	jar	package name	io	Highest
Product	jar	package name	micrometer	Highest
Product	jar	package name	observation	Highest
Product	Manifest	automatic-module-name	micrometer.observation	Medium
Product	Manifest	branch	HEAD	Low
Product	Manifest	build-date	2024-04-08_13:59:01	Low
Product	Manifest	build-date-utc	2024-04-08T13:59:01.622808235Z	Low
Product	Manifest	build-host	ed5fdb4eabcb	Low
Product	Manifest	build-job	deploy	Low
Product	Manifest	build-number	32110	Low
Product	Manifest	build-timezone	Etc/UTC	Low
Product	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/32110	Low
Product	Manifest	built-os	Linux	Low
Product	Manifest	built-status	release	Low
Product	Manifest	Bundle-Name	micrometer-observation	Medium
Product	Manifest	bundle-symbolicname	micrometer-observation	Medium
Product	Manifest	change	52d1d12	Low
Product	Manifest	full-change	52d1d1249324b691c355a70c53ae1921967449d3	Low
Product	Manifest	Implementation-Title	io.micrometer#micrometer-observation;1.12.5	High
Product	Manifest	module-email	tludwig@vmware.com	Low
Product	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Product	Manifest	module-owner	tludwig@vmware.com	Low
Product	Manifest	module-source	/micrometer-observation	Low
Product	pom	artifactid	micrometer-observation	Highest
Product	pom	developer email	tludwig@vmware.com	Low
Product	pom	developer id	shakuzen	Low
Product	pom	developer name	Tommy Ludwig	Low
Product	pom	groupid	io.micrometer	Highest
Product	pom	name	micrometer-observation	High
Product	pom	url	micrometer-metrics/micrometer	High
Version	file	version	1.12.5	High
Version	Manifest	Bundle-Version	1.12.5	High
Version	Manifest	Implementation-Version	1.12.5	High
Version	pom	version	1.12.5	Highest

Identifiers

pkg:maven/io.micrometer/micrometer-observation@1.12.5 (Confidence:High)

slf4j-api-2.0.13.jar

Description:

The slf4j API

License:

http://www.opensource.org/licenses/mit-license.php

File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.13/slf4j-api-2.0.13.jar
MD5: 7f4028aa04f75427327f3f30cd62ba4e
SHA1: 80229737f704b121a318bba5d5deacbcf395bc77
SHA256:e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.13	High
Version	Manifest	Bundle-Version	2.0.13	High
Version	Manifest	Implementation-Version	2.0.13	High
Version	pom	version	2.0.13	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@2.0.13 (Confidence:High)

spotbugs-annotations-4.8.5.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html

File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.8.5/spotbugs-annotations-4.8.5.jar
MD5: e952af1f90eadb3502cff551518fcbc9
SHA1: 17ab39acf7cf6f7a330ee3be08a4bb2740082b4c
SHA256:6e63acb693f156e4fb79151b88f9eebe731b4da65fe12843503613e0d6e6f68d
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.psi-probe/psi-probe-rest@5.0.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spotbugs-annotations	High
Vendor	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Vendor	pom	artifactid	spotbugs-annotations	Highest
Vendor	pom	artifactid	spotbugs-annotations	Low
Vendor	pom	developer email	andreas.sewe@codetrails.com	Low
Vendor	pom	developer email	dbrosius@mebigfatguy.com	Low
Vendor	pom	developer email	loskutov@gmx.de	Low
Vendor	pom	developer email	skypencil@gmail.com	Low
Vendor	pom	developer id	henrik242	Medium
Vendor	pom	developer id	iloveeclipse	Medium
Vendor	pom	developer id	jsotuyod	Medium
Vendor	pom	developer id	KengoTODA	Medium
Vendor	pom	developer id	mebigfatguy	Medium
Vendor	pom	developer id	sewe	Medium
Vendor	pom	developer id	ThrawnCA	Medium
Vendor	pom	developer name	Andreas Sewe	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Dave Brosius	Medium
Vendor	pom	developer name	Juan Martín Sotuyo Dodero	Medium
Vendor	pom	developer name	Kengo TODA	Medium
Vendor	pom	groupid	com.github.spotbugs	Highest
Vendor	pom	name	SpotBugs Annotations	High
Vendor	pom	url	https://spotbugs.github.io/	Highest
Product	file	name	spotbugs-annotations	High
Product	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Product	Manifest	Bundle-Name	spotbugs-annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Product	pom	artifactid	spotbugs-annotations	Highest
Product	pom	developer email	andreas.sewe@codetrails.com	Low
Product	pom	developer email	dbrosius@mebigfatguy.com	Low
Product	pom	developer email	loskutov@gmx.de	Low
Product	pom	developer email	skypencil@gmail.com	Low
Product	pom	developer id	henrik242	Low
Product	pom	developer id	iloveeclipse	Low
Product	pom	developer id	jsotuyod	Low
Product	pom	developer id	KengoTODA	Low
Product	pom	developer id	mebigfatguy	Low
Product	pom	developer id	sewe	Low
Product	pom	developer id	ThrawnCA	Low
Product	pom	developer name	Andreas Sewe	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Dave Brosius	Low
Product	pom	developer name	Juan Martín Sotuyo Dodero	Low
Product	pom	developer name	Kengo TODA	Low
Product	pom	groupid	com.github.spotbugs	Highest
Product	pom	name	SpotBugs Annotations	High
Product	pom	url	https://spotbugs.github.io/	Medium
Version	file	version	4.8.5	High
Version	Manifest	Bundle-Version	4.8.5	High
Version	pom	version	4.8.5	Highest

Identifiers

pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.5 (Confidence:High)

spring-core-6.1.6.jar

Description:

Spring Core

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/spring-core/6.1.6/spring-core-6.1.6.jar
MD5: 852be6055a31d2ce17b5d231b17f732e
SHA1: dea4b8e110b7b54a02a4907e32dbb0adee8a7168
SHA256:caf51f3d51c5d95e931f411027688f1dde3986d5f2aad67ff1096ddddac36ac5
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-core	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	spring-core	Highest
Vendor	pom	artifactid	spring-core	Low
Vendor	pom	developer email	jhoeller@pivotal.io	Low
Vendor	pom	developer id	jhoeller	Medium
Vendor	pom	developer name	Juergen Hoeller	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	name	Spring Core	High
Vendor	pom	organization name	Spring IO	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	url	spring-projects/spring-framework	Highest
Product	file	name	spring-core	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	jar	package name	core	Highest
Product	jar	package name	io	Highest
Product	jar	package name	org	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.core	Medium
Product	Manifest	Implementation-Title	spring-core	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	spring-core	Highest
Product	pom	developer email	jhoeller@pivotal.io	Low
Product	pom	developer id	jhoeller	Low
Product	pom	developer name	Juergen Hoeller	Low
Product	pom	groupid	org.springframework	Highest
Product	pom	name	Spring Core	High
Product	pom	organization name	Spring IO	Low
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Version	file	version	6.1.6	High
Version	Manifest	Implementation-Version	6.1.6	High
Version	pom	version	6.1.6	Highest

Related Dependencies

Identifiers

pkg:maven/org.springframework/spring-core@6.1.6 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:6.1.6:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:6.1.6:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:6.1.6:*:*:*:*:*:*:* (Confidence:Highest)

spring-hateoas-2.2.2.jar

Description:

		Library to support implementing representations for
		hyper-text driven REST web services.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/hateoas/spring-hateoas/2.2.2/spring-hateoas-2.2.2.jar
MD5: 1abc3f854a7bbbc3305f4d9da8c76ad4
SHA1: 61b5fb1b06265a6c29544fbcd2aaa06c47583e06
SHA256:4893f32a14fc606a16736c99ed69723040d07d57710611b63d61642ba56a64ec
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.0.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-hateoas	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	hateoas	Highest
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	support	Highest
Vendor	Manifest	automatic-module-name	spring.hateoas	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	pom	artifactid	spring-hateoas	Highest
Vendor	pom	artifactid	spring-hateoas	Low
Vendor	pom	developer email	gturnquist(at)vmware.com	Low
Vendor	pom	developer email	odrotbohm(at)vmware.com	Low
Vendor	pom	developer id	gturnquist	Medium
Vendor	pom	developer id	odrotbohm	Medium
Vendor	pom	developer name	Greg Turnquist	Medium
Vendor	pom	developer name	Oliver Drotbohm	Medium
Vendor	pom	developer org	VMware, Inc.	Medium
Vendor	pom	groupid	org.springframework.hateoas	Highest
Vendor	pom	name	Spring HATEOAS	High
Vendor	pom	organization name	Pivotal, Inc.	High
Vendor	pom	organization url	https://www.spring.io	Medium
Vendor	pom	url	spring-projects/spring-hateoas	Highest
Product	file	name	spring-hateoas	High
Product	jar	package name	hateoas	Highest
Product	jar	package name	springframework	Highest
Product	jar	package name	support	Highest
Product	Manifest	automatic-module-name	spring.hateoas	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	Implementation-Title	Spring HATEOAS	High
Product	pom	artifactid	spring-hateoas	Highest
Product	pom	developer email	gturnquist(at)vmware.com	Low
Product	pom	developer email	odrotbohm(at)vmware.com	Low
Product	pom	developer id	gturnquist	Low
Product	pom	developer id	odrotbohm	Low
Product	pom	developer name	Greg Turnquist	Low
Product	pom	developer name	Oliver Drotbohm	Low
Product	pom	developer org	VMware, Inc.	Low
Product	pom	groupid	org.springframework.hateoas	Highest
Product	pom	name	Spring HATEOAS	High
Product	pom	organization name	Pivotal, Inc.	Low
Product	pom	organization url	https://www.spring.io	Low
Product	pom	url	spring-projects/spring-hateoas	High
Version	file	version	2.2.2	High
Version	Manifest	Implementation-Version	2.2.2	High
Version	pom	version	2.2.2	Highest

Identifiers

pkg:maven/org.springframework.hateoas/spring-hateoas@2.2.2 (Confidence:High)
cpe:2.3:a:vmware:spring_hateoas:2.2.2:*:*:*:*:*:*:* (Confidence:Highest)

spring-plugin-core-3.0.0.jar

Description:

Core plugin infrastructure

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/plugin/spring-plugin-core/3.0.0/spring-plugin-core-3.0.0.jar
MD5: d29a8f831dfe90d150ab694489f2e7c2
SHA1: d56aa02dd7272dca30aa598dc8b72e823227046a
SHA256:edf72d44b9cf1199cc783d620f5f86df82fb378521dac313540086e6c3c66ff0
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-plugin-core	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	plugin	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.plugin.core	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	pom	artifactid	spring-plugin-core	Highest
Vendor	pom	artifactid	spring-plugin-core	Low
Vendor	pom	developer email	odrotbohm@vmware.com	Low
Vendor	pom	developer id	drotbohm	Medium
Vendor	pom	developer name	Oliver Drotbohm	Medium
Vendor	pom	developer org	VMware	Medium
Vendor	pom	developer org URL	https://www.spring.io	Medium
Vendor	pom	groupid	org.springframework.plugin	Highest
Vendor	pom	name	Spring Plugin - Core	High
Vendor	pom	organization name	VMware, Inc.	High
Vendor	pom	organization url	https://www.vmware.com	Medium
Vendor	pom	url	spring-projects/spring-plugin/spring-plugin-core	Highest
Product	file	name	spring-plugin-core	High
Product	jar	package name	core	Highest
Product	jar	package name	plugin	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.plugin.core	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	Implementation-Title	Spring Plugin - Core	High
Product	pom	artifactid	spring-plugin-core	Highest
Product	pom	developer email	odrotbohm@vmware.com	Low
Product	pom	developer id	drotbohm	Low
Product	pom	developer name	Oliver Drotbohm	Low
Product	pom	developer org	VMware	Low
Product	pom	developer org URL	https://www.spring.io	Low
Product	pom	groupid	org.springframework.plugin	Highest
Product	pom	name	Spring Plugin - Core	High
Product	pom	organization name	VMware, Inc.	Low
Product	pom	organization url	https://www.vmware.com	Low
Product	pom	url	spring-projects/spring-plugin/spring-plugin-core	High
Version	file	version	3.0.0	High
Version	Manifest	Implementation-Version	3.0.0	High
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/org.springframework.plugin/spring-plugin-core@3.0.0 (Confidence:High)

spring-web-6.1.6.jar

Description:

Spring Web

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/spring-web/6.1.6/spring-web-6.1.6.jar
MD5: bea30302bcb6ef493a8123e4a40ae6a2
SHA1: 49a32e3497fe39550da3b280bda5d9933ae2d51d
SHA256:0f33f5530ef848063958b4b437e3df3119c04a92aea58f9e37fc46948cbbde8e
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-web	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	web	Highest
Vendor	Manifest	automatic-module-name	spring.web	Medium
Vendor	pom	artifactid	spring-web	Highest
Vendor	pom	artifactid	spring-web	Low
Vendor	pom	developer email	jhoeller@pivotal.io	Low
Vendor	pom	developer id	jhoeller	Medium
Vendor	pom	developer name	Juergen Hoeller	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	name	Spring Web	High
Vendor	pom	organization name	Spring IO	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	url	spring-projects/spring-framework	Highest
Product	file	name	spring-web	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	jar	package name	springframework	Highest
Product	jar	package name	web	Highest
Product	Manifest	automatic-module-name	spring.web	Medium
Product	Manifest	Implementation-Title	spring-web	High
Product	pom	artifactid	spring-web	Highest
Product	pom	developer email	jhoeller@pivotal.io	Low
Product	pom	developer id	jhoeller	Low
Product	pom	developer name	Juergen Hoeller	Low
Product	pom	groupid	org.springframework	Highest
Product	pom	name	Spring Web	High
Product	pom	organization name	Spring IO	Low
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Version	file	version	6.1.6	High
Version	Manifest	Implementation-Version	6.1.6	High
Version	pom	version	6.1.6	Highest

Identifiers

pkg:maven/org.springframework/spring-web@6.1.6 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:6.1.6:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:6.1.6:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:6.1.6:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:web_project:web:6.1.6:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: psi-probe-rest

com.github.psi-probe:psi-probe-rest:5.0.1-SNAPSHOT

Summary

Dependencies (vulnerable)

accessors-smart-2.5.1.jar

Evidence

Identifiers

angus-activation-2.0.2.jar

Evidence

Identifiers

asm-9.7.jar

Evidence

Identifiers

error_prone_annotations-2.27.1.jar

Evidence

Identifiers

j2objc-annotations-3.0.0.jar

Evidence

Identifiers

jakarta.activation-api-2.1.3.jar

Evidence

Identifiers

json-path-2.9.0.jar

Evidence

Identifiers

json-smart-2.5.1.jar

Evidence

Identifiers

jsr305-3.0.2.jar

Evidence

Identifiers

micrometer-commons-1.12.5.jar

Evidence

Identifiers

micrometer-observation-1.12.5.jar

Evidence

Identifiers

slf4j-api-2.0.13.jar

Evidence

Identifiers

spotbugs-annotations-4.8.5.jar

Evidence

Identifiers

spring-core-6.1.6.jar

Evidence

Related Dependencies

Identifiers

spring-hateoas-2.2.2.jar

Evidence

Identifiers

spring-plugin-core-3.0.0.jar

Evidence

Identifiers

spring-web-6.1.6.jar

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor